<?php
error_reporting(0);
$flag="flag{xiaohua-2020}";
$a = "www.xiaohua.com";
$id = $_GET['id'];
@parse_str($id);  //
if ($a[0] != 'QNKCDZO' && md5($a[0]) == md5('QNKCDZO')) {
    $flag="flag={6aOe5rWB55u05LiL5LiJ5Y2D5bC6}";
} else {
    $flag="索德斯呢??";
}
?>

<html>
<head>
  <meta charset="UTF-8">
  <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
  <meta http-equiv="X-UA-Compatible" content="ie=edge">
  <title>变量覆盖-03</title>
</head>
<body>
  <h1>仔细思考：拿到flag,flag是一句古诗！</h1>
  <h3><a href="https://www.cnblogs.com/xhds/p/12349189.html" target="_blank">这里涉及Hash比较缺陷</a></h3>
  <a href="source.php" target="_blank"><h2>查看源码</h2></a>
  <h2><?=$flag?></h2>
</body>
</html>
